This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
File:                     mWsZb8o8chhx7p4UE5Mri1DtCas.mft (raw, json)
Hash identifier:          O3Zjoogsjn1Vaq3xXz8Ak7U5uE4ovh5c58lm6IAzZGg=
Subject key identifier:   4C:9E:75:0E:E8:13:AC:2B:D4:1E:77:A8:32:AA:E8:87:BB:34:F9:FB
Authority key identifier: 99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB
Certificate issuer:       /CN=A91164D3/serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB
Certificate serial:       0110
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
Manifest number:          010E
Signing time:             Fri 05 Dec 2025 02:58:55 +0000
Manifest this update:     Fri 05 Dec 2025 02:58:54 +0000
Manifest next update:     Fri 12 Dec 2025 02:58:54 +0000
Files and hashes:         1: mWsZb8o8chhx7p4UE5Mri1DtCas.crl (hash: JTFJHe+ez6AyA9jqm2gG2wY4lw6VmDgs65dikL4seRg=)
                          2: 934F8250338A11EFB9C7A738C4F9AE02.roa (hash: FWDEQfcrySfMIWIlPkoTcMajRo2lEM/ZyKql4949RJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl
                          rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Dec 2025 02:58:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91164D3, serialNumber=996B196FCA3C721871EE9E1413932B8B50ED09AB
        Validity
            Not Before: Dec  5 02:58:54 2025 GMT
            Not After : Dec 12 02:58:54 2025 GMT
        Subject: CN=69324a6f-8fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:7a:81:ac:5d:b0:15:3e:54:dd:92:11:ce:
                    2a:c1:51:1c:50:b2:13:62:9f:0a:ed:16:6a:20:85:
                    b1:ac:2d:70:b6:0c:54:b3:2e:7e:13:ff:8a:32:8e:
                    e8:1f:a8:29:be:76:2a:5d:8d:c1:3a:1d:40:ea:ba:
                    95:dd:72:e2:37:30:b7:3d:79:3d:53:3b:2a:85:c4:
                    48:40:93:57:11:6a:d6:c1:5b:f2:de:a0:5f:4d:d0:
                    82:a5:2d:ca:45:c1:d5:ef:52:cb:06:cb:e0:58:d6:
                    c3:29:c9:0c:8c:a9:0d:d5:0e:da:a9:40:53:92:78:
                    93:8f:cc:f5:4e:02:ad:1f:c2:65:b4:db:dc:a1:00:
                    ba:dd:fe:be:46:8a:df:e1:25:87:0f:38:61:53:9d:
                    f8:9a:a7:57:6e:20:2b:30:97:a6:57:a7:b2:89:56:
                    bb:c7:de:bf:6b:68:7a:e1:ac:d1:1b:41:73:2c:57:
                    63:e0:0b:0d:46:51:fc:37:dc:04:f5:76:ee:4f:66:
                    53:f7:19:05:e6:37:0b:fb:c2:c7:1f:2f:7f:c5:a2:
                    5a:38:68:de:92:d4:f8:ff:ff:8b:9e:2a:c4:17:38:
                    e9:17:58:e1:89:d0:57:8f:6f:c1:ee:b2:64:1c:ba:
                    87:58:09:cf:7c:1e:be:2d:b9:20:b7:ac:fa:dc:5e:
                    7a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:9E:75:0E:E8:13:AC:2B:D4:1E:77:A8:32:AA:E8:87:BB:34:F9:FB
            X509v3 Authority Key Identifier:
                keyid:99:6B:19:6F:CA:3C:72:18:71:EE:9E:14:13:93:2B:8B:50:ED:09:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWsZb8o8chhx7p4UE5Mri1DtCas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91164D3/155048EA338911EF99FD1C27C4F9AE02/mWsZb8o8chhx7p4UE5Mri1DtCas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b7:15:01:e8:e0:e5:25:05:9e:bf:f4:46:ce:08:4e:28:1c:
         d9:a4:ad:00:70:08:30:34:07:4d:c5:03:96:18:eb:fe:c0:64:
         ad:bb:bf:7e:61:e6:75:12:33:26:bf:8c:0d:4b:f5:57:fb:fc:
         cb:43:b2:2f:8a:dc:4f:63:0b:a4:c6:ca:ce:5e:82:d3:a0:b8:
         4e:98:ab:fe:4f:91:ce:65:5e:38:6c:ca:38:eb:5a:71:58:46:
         00:6e:b5:e5:f9:1b:cf:60:b5:7e:fd:6e:ec:98:af:a9:5c:96:
         00:12:a7:0a:4a:aa:56:9e:4f:d1:bf:0b:82:6c:ea:11:e6:c3:
         d1:3c:8c:5b:a1:47:f3:a9:4c:a8:f6:13:24:ac:b8:ed:8c:11:
         04:6a:4c:b1:62:ad:83:53:f9:4b:84:8f:b9:ff:4e:7e:04:ec:
         73:fe:fd:c4:62:d8:28:62:64:a7:9b:43:5d:97:a4:f0:bc:83:
         b1:1e:2f:f1:3b:87:39:20:7e:cc:e7:60:45:0e:28:eb:b5:da:
         ed:49:22:e4:b1:05:02:c4:49:37:43:04:a1:51:66:43:90:ed:
         4a:0a:50:a7:56:6e:49:1f:22:9e:c0:db:45:70:0d:3b:42:63:
         1e:5d:20:32:85:0f:26:57:7a:68:aa:c0:5b:ac:19:a5:86:e1:
         9a:1b:99:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:09:12 2025 by rpki-client